[Dovecot] Dovecot under brute force attack - nice attacker

Lenthir len7hir at gmail.com
Fri Jun 5 10:24:53 EEST 2009


Timo Sirainen pisze:
> On Jun 4, 2009, at 10:01 AM, Lenthir wrote:
>> Trying 127.0.0.1...
>> Connected to localhost.
>> Escape character is '^]'.
>> +OK POP3 [127.0.0.1] server ready
>> user krzys
>> +OK User name accepted, password please
>> pass wew
>> -ERR Bad login / Bledne haslo lub login.
>> Connection closed by foreign host.
> 
> That's not Dovecot.
> 

I'm sorry to said that, but this is Dovecot...
Maybe with little modifications, but this is Dovecot :)

POP3:
telnet localhost 10101
Escape character is '^]'.
+OK POP3 [127.0.0.1] server ready
user krzys7373 at op.pl
+OK User name accepted, password please
pass ********
+OK Mailbox open, 5 messages, new: 0, your primary account: 
krzys7373 at op.pl, message quota: 30 kB
capa
+OK
CAPA
TOP
UIDL
RESP-CODES
PIPELINING
.
quit
+OK Sayonara

IMAP:
telnet localhost 10102
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
* OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE 
STARTTLS AUTH=PLAIN] Dovecot ready.
o logout
Connection closed by foreign host.



More information about the dovecot mailing list